Four npm packages from the same publisher deliver a DDoS botnet and credential stealing malware, with one containing a near…